Privacy policy IKEA Secondhand Marketplace
1. About this Privacy Notice
We know how important it is for you to understand how we use your data, and we will always do our best to be transparent with you.
This Privacy Notice covers how and why we collect, store, process and share any of the personal data you provide us when you use the second-hand marketplace made available to you at https://secondhand.ikea.com/pt/en (the “Marketplace”) for the sale and purchase of second-hand IKEA furniture and home furnishing accessories.
This Privacy Notice also tells you what your rights are in relation to the personal data that we process about you. We respect your right to privacy and are committed to maintaining it.
The second-hand marketplace is only available to IKEA Family members. You can read about the processing of personal data for the purposes of offering you IKEA Family and the connected IKEA Family account here. The terms and conditions applicable to your IKEA Family membership (including your access to the Marketplace) can be found here (“IKEA Family T&C’s”). This Privacy Notice is only about the processing of your personal data when you use the Marketplace and interact with other users of the Marketplace.
2. Who are we and how can you contact us?
We are Ingka Group, a franchisee of Inter IKEA Systems B.V., operating digital and physical IKEA sales channels across the world. You can read more about us at www.ingka.com.
The Ingka Group company that is data controller under this Privacy Notice is Ingka NB AB hereinafter referred to as “Data Controller” or “we”. Ingka NB AB is a Swedish limited liability company, registered with the Swedish Companies house under registration number 559487-7051, having its registered address at Älmhultsgatan 2, 215 86 Malmö, Sweden. Ingka NB AB is the operator of the Marketplace.
If you would like to contact our Data Protection Officer, please send an email to [email protected]. If you would like to exercise any of your rights (as set out in section 10 below, please reach out to the Marketplace customer support through the Marketplace chat.
3. What personal data do we process and for what purpose?
When you use the Marketplace, we will collect and process your personal data. We may collect the following types of personal data:
- Information you provide directly to us: This includes your IKEA Family profile (for log-in purposes), your published listings including photos, chat messages that you type and reviews that you make, and any other information you choose to provide when you use the Marketplace.
- Information we collect automatically: When you interact with us on the Marketplace, we will automatically collect certain information, such as your IP address, browser software and operating system.
- Information we receive from others: We receive personal data about you from our payment service provider and we may also receive personal data from other Marketplace users if they rate and review you.
Your personal data is processed for the following purposes:
To identify you as an IKEA Family member and make the Marketplace work for you
In order to access the Marketplace, you will need to log in with your IKEA Family account. We need to know where you are located to present the right country and language version of the Marketplace to you. We will also process your personal data to enable you to list second-hand IKEA products that you want to sell, and to browse and purchase second-hand IKEA products from others.
Personal Data processed
- Email address and password
- Your IKEA Family ID number
- Country of residence/zip code Listings (including photos and descriptions)
- Purchase and sale history and transaction ID
Legal basis
We do this to perform our contract (the IKEA Family T&C’s) with you to enable us to grant you access to the Marketplace.
To facilitate the communication between buyers and sellers
We will process your personal data to make available the chat functionality to help the interaction between buyers and sellers. We apply automatic content moderation of the chat messages to ensure they comply with the IKEA Family T&C’s. For the same reason, we will review your message if another user has flagged it as inappropriate. We may also process the chat messages if needed to manage an issue raised under the Buyer Protection.
Personal Data processed
- User name
- Chat messages
- Product questions
Legal basis
We process this personal data to perform our contract (the IKEA Family T&C’s) and because we have a legal obligation to take action if content is flagged as illegal or inappropriate.
To enable ratings and reviews
The Marketplace allows for users to rate and review other users. All ratings and reviews are subject to moderation. When published, they will indicate the username of both the one publishing the review, and the one subject to the review.
Personal Data processed
- Username of the one making a review
- Username of the one subject to a review
- Product(s) sold
- Rating and review data
Legal basis
We process this personal data to perform our contract (the IKEA Family T&C’s).
To facilitate payment
We will process your personal data to facilitate the payment process, whether you make a payment or receive payment through a bank transfer or an IKEA digital refund card. The payment is handled by an external payment service provider. We will share your bank account details, billing/shipping address, name and last name, date, time and amount of purchase, device ID, order ID, payment card details and customer identifiers to the transaction, with the payment service provider. If requested by the payment service provider for the purpose of e.g. KYC controls (know-your-customer) or fraud prevention, we may also ask you to share your tax ID and official/national identification number.
Personal Data processed
- First name and last name
- Date, time and amount of purchase
- Bank account details
- Billing/shipping address
- Device ID
- Order ID
- Payment card details
- Customer identifiers
- Tax ID or official/national identification number
Legal basis
We process this personal data to perform our contract (the IKEA Family T&C’s). For the purpose of KYC and fraud prevention we process the personal data based on our legal obligation to do so.
To deliver our customer support services to you
We process the data from support chat interactions you have with us on the Marketplace to provide customer support services. We also use this data to follow up on complaints and improve systems and services offered through understanding system performance and activity.
Personal Data processed
- Customer ID, name and contact information
- The type of service request
- Attachments (if any) of information supporting the request
Legal basis
We process this personal data in order to fulfil our contract (the IKEA Family T&C’s) with you, and to ensure that you have a smooth experience and to resolve issues you encounter when using the Marketplace.
To personalise your experience on the Marketplace
We personalise your experience on the Marketplace by performing analysis on user activity data to generate customer insight. These customer insights help us tailor your feed, recommend listings that are relevant for you and present relevant search results.
Personal Data processed
- Browsing history
- Activity data (e.g. purchases, published listings, sold item and searches)
- Alerts
- Location data (to show listings near you)
- Hashed email address
Legal basis
We will personalise your online experience based on your cookie consent and where applicable our legitimate interest to create an inspiring Marketplace that is relevant to you.
To report transactions to the tax authorities
We will process your personal data to report your identity to the Swedish tax authorities (and your local tax authority) if your total sales and/or number of transactions reach the threshold set out in applicable tax legislation (implementing the DAC7 directive).
Personal Data processed
- First name and last name
- Address
- Tax ID or official/national identification number
- Date of birth
- Total value of sales on the Marketplace during the current year
- Number of transactions
Legal basis
We process this personal data to perform our legal obligation under applicable tax legislation (DAC7).
To help us track performance and improve our services
We use your interaction data to analyse trends and identify internal improvements to the performance and usage of the Marketplace. We conduct data analytics on Marketplace activity at an aggregated level or use pseudonymised data to allow us to monitor performance and continually improve.
Personal Data processed
- Account data
- Online interactions
- Browsing history
- Shopping preferences
- Alerts
- Navigation and connectivity information
Legal basis
We have legitimate interest in analysing this information to improve customer experience. Your cookie consent is used for browsing history to support this analysis. We use your user profile to understand your preferences and alerts where these have been provided within your user profile. You can manage your cookies and update your preferences at any time. This data will be linked to a pseudonymized identifier as a measure to protect your identity.
To help us secure that the Marketplace is safe to use
We use your personal data to make sure that our Marketplace is a safe space for everyone. This means that we process personal data to prevent and protect us and you from fraud and scams, to make your payments secure and to make sure that all users comply with the IKEA Family T&C’s that apply to the Marketplace. This also means that we moderate the Marketplace for suspicious activity and take action when users flag illegal content.
Personal Data processed
- User ID
- Account data
- Activity data
- Device and technical data, IP address
- Location data
- Chat messages
Legal basis
We have legitimate interest to prevent and protect you and us from misuse and abuse of the Marketplace, fraud and security threats. In addition to this, we have a legal obligation as a platform operator to take action when we become aware of illegal activities on our Marketplace and to save such information for the period set out in the European Digital Services Act.
4. How long do we keep your data?
We keep your personal data as long as needed for the purposes set out above. When we no longer need your personal data for the intended purpose(s), the data will be deleted or anonymised so you can no longer be identified. Sometimes, we may keep certain data for a shorter or longer period of time, for business and operational reasons, or based on legal obligations.
5. Who has access to your personal data?
We use third-party service providers (“service providers”) to process your personal data, on our behalf, and in accordance with the instructions provided by us, in strict compliance with applicable legislation, as well as this Privacy Notice.
Service providers include, but are not limited to:
- Third parties who provide digital services to us so that we can operate the Marketplace.
- Third parties who help us segment and understand our customers.
- Companies that provide advertising and marketing services to us.
- Companies that aggregate and/or anonymise clickstream of behaviour on our website, app and Marketplace.
Our service providers will not transmit your data to other entities without our approval and without an applicable legal basis for such transmission. We undertake to only contract with entities that offer adequate guarantees of the implementation of technical and organisational measures to ensure the protection of your rights. All service providers will be bound by a written contract that regulates, among other things, the subject matter and duration of the processing, the nature and purpose thereof, the categories of data subjects, and the rights and obligations of the parties.
Furthermore, we may transmit or communicate your personal data to third parties (including public authorities and governmental bodies) when necessary for the purposes of (i) fulfilling our obligations under the IKEA Family T&C’s, and (ii) complying with legal obligations.
Lastly, other Marketplace users will have access to some of your personal data (username, listings, location, ratings and reviews) which is needed for them to interact with you on the Marketplace. When you have sold a product, the buyer will also have access to the pick-up address you have specified in your profile.
6. Automated Decision Making
We leverage artificial intelligence (AI) tools to proactively identify and flag content, listings, or user behavior on the Marketplace that potentially violates applicable law and/or our moderation policies. However, to ensure fairness and accuracy, all content flagged by AI will undergo a mandatory review by a human moderator. This process guarantees that no decisions regarding content removal, user warnings, or account actions are made solely by automated means, thereby upholding our commitment to human oversight and compliance with regulations on automated decision-making.
7. International Data Transfers
We may transfer personal data overseas to companies within Ingka Group (where those companies share various operations and business processes with us) or to our service providers. This may require processing of personal data in a country outside of the EEA. In those cases, the transfer of your personal data has been made lawful through an adequacy decision by the European Commission or because we have secured the transfer by entering into the standard contractual clauses (as approved by the European Commission) with the recipient. We will take steps to ensure that the transfer of your personal data outside of the EEA receives an adequate level of protection as it does in the EEA and if necessary, use other valid transfer tools or derogation in line with applicable data protection laws in order to protect and secure your personal data. If you would like further information about international data transfers and the safeguards that we have implemented to ensure the protection of your personal data, please contact us as set out in section 2 above.
8. Your rights
Under privacy laws, including the General Data Protection Regulation (“GDPR”), the UK General Data Protection Regulation and the Swiss Data Protection Act in force since 1 September 2023, you have a number of rights in relation the personal data that we hold about you. You may exercise these rights at any time by contacting us using the details set out in section 2.
The access, rights and controls might vary depending on your request, however, in general the following rights are available to you, unless we communicate or justify otherwise.
Access: You are entitled to gain confirmation from us about the personal data that we process about you, and, where that is the case, access to the personal data.
Rectification: You are entitled to ask us to update and amend your personal data that might be inaccurate, incomplete or outdated.
Erasure (“right to be forgotten”): You are entitled to request us to delete personal data which is no longer necessary for its purpose.
Restriction: You are entitled to ask us to temporarily or permanently restrict/stop some of the processing of your personal data.
Objection: You are entitled to at any time, object to the processing of your personal data when the legal ground for processing this personal data is our legitimate interest. In certain cases, accommodating to your request could make it impossible for us to provide you with access to the Marketplace.
Right to withdraw your consent: If we base our processing of your personal data on your consent, you have the right to withdraw your consent at any time. You can exercise this right by contacting us as set out in section 2 above. Please note that withdrawing your consent does not affect the lawfulness of the processing carried out before the withdrawal.
Data portability: You are entitled to receive a readable copy of your personal data and, if requested, have the personal data to be transferred to another service provider.
Not be subject to automated decision-making: You are entitled to not be subject to a decision based solely on automated processing, including profiling, which creates legal effects concerning you, or similarly significantly affects you.
Right to complain: You have the right to send a complaint about our use of your personal data to your local data protection authority. However, before doing so, we would of course love to hear from you and get the chance to address your concern.
Making a complaint to your local data protection authority will not affect any other legal rights or remedies that might be available to you under law.
We may need to request specific information from you to help us confirm your identity and ensure your right to access your data (or to exercise any of your other rights). This is to ensure your personal data is not disclosed to any person who has no right to receive it. We may also contact you to ask you for further information in relation to your request to speed up our response.
We try to respond to all legitimate requests within one calendar month. Occasionally it could take us longer than this if your request is particularly complex or you have made a number of requests. In this case, we will notify you and keep you updated.
9. How will I know if this Privacy Notice has changed?
As privacy regulations change and we develop our processes and services, we may make changes to this Privacy Notice. All future changes to our Privacy Notice will be updated online and accessed online with the last date of update displayed as below. If we make material changes to the Privacy Notice we will also inform you by email.
We encourage you to review this Privacy Notice regularly for any changes. Your continued use of the Marketplace after any implemented changes or revision to this Privacy Notice shall indicate that you have been duly informed of the revised terms for processing your personal data.
This Privacy Notice was last updated on November, 2025.